registry / @customize-agent/knowledge / 3.0.9

@customize-agent/knowledge@3.0.9

Local knowledge base infrastructure for customize-agent

Static Scan Results

scanned 5d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 6 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetworkShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 25 file(s), 198 KB of source

Source & flagged code

1 flagged

dist/extraction/module-resolver.jsView file

Lines 1-23javascript

1/**

2 * 模块解析工具。

3 *

4 * Next.js standalone / 打包 Server 中，ESM 动态 import(绝对路径) 被自定义

5 * loader 拦截后可能失败。但 CJS require() 走 Module._resolveFilename

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/extraction/module-resolver.jsView on unpkg · L3

6 * monkey-patch，能正确找到 pnpm store 和 vendor 目录中的包。

7 *

8 * 此模块统一使用 CJS require 加载依赖，确保在所有上下文中可靠工作。

9 */

10import { createRequire } from 'node:module';

11import { fileURLToPath } from 'node:url';

12import * as fs from 'node:fs';

13import * as path from 'node:path';

14/** 从 knowledge 包自身目录解析的 CJS require 函数 */

15const localRequire = createRequire(import.meta.url);

16/** knowledge 包所在的实际目录 */

17const knowledgeDir = path.dirname(fileURLToPath(import.meta.url));

18/**

19 * 在 .pnpm 目录中查找包的实际路径（处理 standalone 缺少顶层 symlink 的情况）。

20 */

21function findInPnpm(packageName) {

22 let dir = knowledgeDir;

23 for (let i = 0; i < 10; i++) {

Source & flagged code

1 flagged · loading source

dist/extraction/module-resolver.jsView file

3* L4: * Next.js standalone / 打包 Server 中，ESM 动态 import(绝对路径) 被自定义 L5: * loader 拦截后可能失败。但 CJS require() 走 Module._resolveFilename

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/extraction/module-resolver.jsView on unpkg · L3

Findings

3 Medium3 Low

MediumDynamic Requiredist/extraction/module-resolver.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Source & flagged code

1 flagged

dist/extraction/module-resolver.jsView file

Lines 1-23javascript

1/**

2 * 模块解析工具。

3 *

4 * Next.js standalone / 打包 Server 中，ESM 动态 import(绝对路径) 被自定义

5 * loader 拦截后可能失败。但 CJS require() 走 Module._resolveFilename

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/extraction/module-resolver.jsView on unpkg · L3

6 * monkey-patch，能正确找到 pnpm store 和 vendor 目录中的包。

7 *

8 * 此模块统一使用 CJS require 加载依赖，确保在所有上下文中可靠工作。

9 */

10import { createRequire } from 'node:module';

11import { fileURLToPath } from 'node:url';

12import * as fs from 'node:fs';

13import * as path from 'node:path';

14/** 从 knowledge 包自身目录解析的 CJS require 函数 */

15const localRequire = createRequire(import.meta.url);

16/** knowledge 包所在的实际目录 */

17const knowledgeDir = path.dirname(fileURLToPath(import.meta.url));

18/**

19 * 在 .pnpm 目录中查找包的实际路径（处理 standalone 缺少顶层 symlink 的情况）。

20 */

21function findInPnpm(packageName) {

22 let dir = knowledgeDir;

23 for (let i = 0; i < 10; i++) {